grant codebase "file:${user.home}/-" { permission java.io.FilePermission "/tmp/abc.txt", "read,write"; };